DCOM hardening (CVE-2021-26414) on March 14, 2023 patchday for Windows 10/11 and Server

Posted on 2023-03-05 by guenni

Windows[German]Just a reminder for administrators of Windows in enterprise environments. There is a vulnerability in Microsoft's Windows DCOM implementation (Windows DCOM Server Security Feature Bypass, CVE-2021-26414) that allowed security features to be bypassed. Microsoft documented this in 2021, and patched it then, closing this vulnerability in stages. Recently, I was reminded that Microsoft will release a final patch on March 14, 2023 that will remove the ability to disable this DCOM hardening.

Continue reading →

Posted in Security, Update, Windows | Tagged , , | Leave a comment

Tiny 11: Unclutter Windows 11 Pro shown in a video

Posted on 2023-03-05 by guenni

Windows[German]A little Sunday topic for readers who are using Windows 11 or are looking at this platform and are in need for a "Leightweigt Windows 11". There is a project called Tiny 11, where a hobbyist has stripped of all the bloatware that Microsoft ships with a Windows 11 Pro. The system is slim and runs smoother than the Windows 11 delivered by Microsoft. The hobbyist has shown in a video what he has removed and optimized for Tiny 11.

Continue reading →

Posted in Windows | Tagged | 2 Comments

Busted: Instagram influencer with 40 million followers uses Russian Zeus bot

Posted on 2023-03-05 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[English]Security researchers have come across an open Cassandra database instance that probably contained data from the Russian website instarobot.pro. The website is known for offering services for spamming and botting on Instagram under the name Zeus. The records also included a reference to an Instagram influencer with 40 million followers using the Russian Zeus bot.

Continue reading →

Posted in Security | Tagged | Leave a comment

Reminder: Changes to Certificate-Based Authentication for Domain Controllers in April 2023

Posted on 2023-03-05 by guenni

Windows[German]It is still a few weeks until the April 2023 patchday. However, I would like to remind administrators who are responsible for updating Windows Domain Controllers about a topic in the Domain Controller area. It is about the fact that Microsoft has adjusted the certificate-based authentication for Domain Controllers (DC) via update in 2023 and disabled the possibility to disable it (in case of occurring problems) as of April 11, 2023.

Continue reading →

Posted in Security, Update, Windows | Tagged , | Leave a comment

Microsofts FSLogix: Hotfix 1 (2.9.8440.42104) released for buggy v2210

Posted on 2023-03-04 by guenni

Update[German]Brief note for troubled administrators in companies who use FSLogix and are annoyed by the numerous bugs in version 2210. Microsoft has now released FSLogix 2210 Hotfix 1 (2.9.8440.42104). This is supposed to fix the numerous problems of version 2210. Here is some information about what it is all about in the end.

Continue reading →

Posted in issue, Office, Software, Update, Windows | Tagged , , , , | 1 Comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

LibreOffice can't start after ugrade to Linux Mint 21.1

Posted on 2023-03-04 by guenni

[German]A short post from the Linux world, although I'm not yet sure if and how widespread the problem is. A blog reader contacted me last Friday and complained that his LibreOffice wouldn't start after he upgraded a Linux Mint system to version 21.1. I did a little research.

Continue reading →

Posted in issue, Linux, Office | Tagged , , | Leave a comment

Review of the VMware ESXi server cyberdebacle (Feb. 2023)

Posted on 2023-03-04 by guenni

Sicherheit (Pexels, allgemeine Nutzung)[German]A brief flashback to February 2023 – since the beginning of the year, numerous VMware ESXi servers have been hijacked via a known vulnerability that has long since been closed. This VMware ESXi vulnerability has a huge threat potential and there are probably still thousands of unpatched systems. Here is a brief overview again.

Continue reading →

Posted in Security, Virtualization, Windows | Tagged , , | Leave a comment

Windows security updates against Intel silicon vulnerabilities (March 2, 2023)

Posted on 2023-03-03 by guenni

Windows[German]Microsoft has released special updates for Windows versions still in support on March 2, 2023. These are supposed to fix vulnerabilities (Speculative Execution Control and side-channel attacks) in Intel's CPUs. These vulnerabilities in Intel processors have been known since last summer. The special updates are also only available for manual download from the Microsoft Update Catalog.

Continue reading →

Posted in Security, Windows | Tagged , , , | 2 Comments

Windows: Unified Update Platform will get active end of March 2023, prepare WSUS

Posted on 2023-03-03 by guenni

Windows[English]Starting March 28, 2023, Microsoft will arm its Unified Update Platform (UUP) after a lengthy preview period for Windows 11 version 22H2. This is intended to bring the power of Windows Update and Windows Update for Business to on-premises Windows clients. Microsoft promises to simplify update deployment via WSUS (Windows Server Update Services) or Microsoft Configuration Manager. Here is some information on the topic.

Continue reading →

Posted in Update, Windows | Tagged , , , | Leave a comment

Windows 10/11: Using Windows Update for Business and WSUS together

Posted on 2023-03-02 by guenni

Windows[German]Brief information for administrators in enterprise environments. Microsoft has published an article as of February 28, 2023 with notes on what has changed when scanning for updates on clients running Windows 10 and Windows 11 and how the machines scan for new patches using either Windows Update for Business (WUfB) and WSUS. DualScan is dead according to this and administrators need to watch what group policies are set.

Continue reading →

Posted in Update, Windows | Tagged , , , | Leave a comment